Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bpo-37218: Change digestmod deprecation notice to versionchanged #13947

Closed
wants to merge 2 commits into from

Conversation

moreati
Copy link
Contributor

@moreati moreati commented Jun 10, 2019

In case readers of the documentation are taking this exmaple as some
form of recommendation, change it to a hashing alogrithm without known
collision attacks.

As https://tools.ietf.org/html/rfc6151 notes "attacks on HMAC-MD5 do not
seem to indicate a practical vulnerability when used as a message
authentication code", but "for a new protocol design, a ciphersuite with
HMAC-MD5 should not be included". On this basis I think it's best not to
mention it here.
@csabella
Copy link
Contributor

The wording for this was changed in #16805.

@csabella csabella closed this May 28, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants